Abstract 

A system and method for managing alert incidents or 
indications in an enterprise processes information about the 
enterprise using tables, databases, and rules to determine 
whether the information is worthy of declaring an incident for 
action to be taken. The inputted information is filtered and 
throttled using the rules, decision tables, databases and 
defaults to display the incident in a useful format that shows a 
defined conclusion for analysis. 
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